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Installation information 



Software name : M3 Mail 3.0 
Execute file name:M3MAIL.exe 
Directory in which it is installed: /m3/ 
Name of uninstaller: /m3/uninstall.exe 



Extension: txt 

Execute file name: /tools/gpad.exe 
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Association information 
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Software name : Attachment sever 2.0 
Execute file name: /as/wserv.exe 
Object name:/www/pub/* 
User group name: www 
Access type: R 



Sample policy 



Object name 


Subject information 


Access 
type 


Program name 


User 


/datafile.db 


/db/hdbr.exe 


system 


RW 


/datafile.db 


/db/comm.exe 


system 


RW 


/comm.exe 


/dbm/act.exe 


system 


RX 


/comm.exe 


/dbm/view.exe 


system 


RX 



Access log 



Robert C. Colwell, Reg. No. 27,431 (&50) 326-2400 

Applicant: Masato ARAI, et al. Appln. No. 10/688,026 
Atty Docket No. 16869P-097900 Confirmation No. 2167 
Title: Policy Setting Support Tool 
Sheet 4 of 15 



□ I c 




0 
0 


o 
o 


o 
o 


o 
o 


Time 
period 


CM 
1 


CM 

i 


CM 
i 


CM 

i 


O 
O 


o 
o 


o 
o 


o 
o 




V i 

0 


r-J 

o 


o 
o 


o 
o 


Access 
type 


(H 


on 


RWD 


RWDX 


c 
0 










'-4— « 

CO 

E 


0 








Subject infor 


Attachment Server 2. 


Gigapad 1.0 


Hi-DB Manager 5.0 


M3 Mail 3.0 


Object name 


/www/pub/* 


2 

* 


/db/datafile.db 


/mail/satou/* 


View 






IB 





CO 

CJ -4— ' 

< 



o 

<D 
CO 



co 
ID 



o 

CO 

jC 

O 



i— c 

CL 



CD 

E 

CO 

c 
o 

0) 

O 



o 


o 


o 


o 


CSJ 




CM 


CM 


i 

o 


i 

o 


o 


o 


66 


o 


o 


o 



o 

CO 
CD 
^" 
CM 



O 

8 5 



CM 




c 

ill 



\ 



& 

a> 
Q 



\ 



CD 

CO 

"> 
CD 

a: 



\ 



a) a) 
to cl 

CD CO 

o: CO 



\ 



•= E 
c CD 

CO 

CO 



\ 



CO 



^co 

CO 



v, 



CM 
CO 



CO 



o 

CO 

^1- 



O 







o 
o 


O 
O 


O 

o 


o 
o 


o 
o 


Time 
>eriod 


:00-24: 


:00-24: 


00-24: 


00-24: 


00-24: 






o 
o 


o 
o 


o 
o 


o 
o 


o 
o 


Access 
type 


on 


1 


1 


RWD 


RWDX 




User 


www 


users 


system 


system 


satou 


: information 


Characteristic 
Value 


12345 


13579 


98765 


43210 


91827 


Subjecl 


Program name 


as/wserv.exe 


/tools/gpad.exe 


/db/hdbr.exe 


/db/comm.exe 


8 

CO 

E 

00 

E 
co 
.E 


Object 
name 


/www/pub/* 


S 

* 


/datafile.db 


/mail/satou/* 


View 


r 


ED 


ED 


ED 



CO 



Robert C. Colwell, Reg. No. 27,431 (650) 326-2400 

Applicant: Masato ARAI, etal. Appln. No. 10/688,026 
Atty Docket No. 16869P-097900 Confirmation No. 2167 
Title: Policy Setting Support Tool 
Sheet 5 of 15 



m 



o 

CM 



cz <d 

^ CL 



CO 

< 



c 
o 

'■4—' 

to 
E 

a 

c 

t5 
a> 
IS* 

CO 



E 

03 

CD 
03 



O 
CO 



CO 
3 



o 

■e-i 

(0 

O 



a) 

E 
as 
c 

E 
2 



E 

03 

c 
13 

o 



o 
o 

o 
o 

o 
o 



o 
o 

o 
o 

o 
o 



o 
o 

o 
o 

o 
o 



o 
o 

1 

o 

o 
o 



o 
o 

1 

o 
o 
o 



01 



on 



x 

Q 

<: 

on 



o 

c\i 

1 

<D 
CO 
-•— » 
C 
CD 

E 
sz 
0 

03 

5 



(0 
Q_ 
03 
D) 

O 



O 

a5 

O) 

aj 
c 
03 

oo 
a 



o 
10 

a> 
o> 
a) 

CD 

00 
Q 



o 

CO 
CO 

CO 



VL 
a> 

CO 
13 



E 

CO 



CO 
CO 



=3 

s 

03 

CO 



10 

CN 



s 

CD 
CD 



CO 
CO 



CD 
CO 



"ri 

CO 
CL 
O) 
_CO 

o 



LO 
00 



CD 

8 

JQ 
T3 
_£= 

X3 



CNI 

CO 



8 
0 

E 
E 
8 



T3 
CO 



CN 
CO 



CO 

E 

CO 

E 

CO 

E 



2 

03 
^CO 

CO 

E 



Robert C. Colwett, Reg. No. 27,431 ( 6 5<>) 326-2400 

Applicant: Masato ARAI, et al. Appln. No. 10/688,026 
Atty Docket No. 1 6869P-097900 Confirmation No. 2167 
Title: Policy Setting Support Tool 
Sheet 6 of 15 



FIG.6 



.600 



Check 0 the items for which you want a sample policy. 

.601 



603a 



□ 



□ 



□ 



Attachment Server 2.0 



Gigapad 1.0 



Hi-DB Manager 5.0 



M3 Mail 3.0 



Check 0 the items for which you want association 



information. 






txt 


603b 


□ 


doc 




□ 


ppt 




□ 


cca 



,602 



605 



Specify the program you wish to monitor. . 606 



/as/reg.exe 



Start 



Stop 



,607 



608- 



Create draft 



Cancel 



-609 



Robert C. Colwell, Reg. No. 27,431 (650) 326-2400 

Applicant: Masato ARAI, etal. Appln. No. 10/688,026 
Atty Docket No. 1 6869P-097900 Confirmation No. 2167 
Title: Policy Setting Support Tool 
Sheet 7 of 15 



fig.7 



Procedure for creating a policy 
from a sample policy 



The user enters 
an appropriate command into 
the User interface component. 
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Obtain a sample policy corresponding 
to the selected software. 
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Create a draft policy 
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Procedure for creating a policy 
from association information 



The user enters 
an appropriate command into 
the User interface component. 



Obtain the execute file name 
using the association information. 
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fig.9 





Procedure for creating a policy 
from the access log 






The user enters 
an appropriate command into 
the User interface component. 










i 




| Monitor and record the behavior 
of the specified software. 




Create a draft policy 
from the access log. 
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Q Display the draft policy. 
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The user edits it manually. 



Save the final policy. 
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FIG.13 
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Collate the policy with the associated 
information and detect the differences. 



Obtain the name of the execution file 
from the association information. 
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Calculate the characteristic value and 
create a policy. 
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The user edits the policy manually. 
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FIG.15 
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Detail setting 



Specifying programs that are allowed to access all file types 

listed above. ,, „ „ 

Use Software name 



File handling 


Quick Filter 1.0 


Reference I 


Anti-virus 


Cyberdoctor2.0 


Reference 


Backup 


File Recovery 3.0 


Reference 


Compression/decompression 




Reference 


E-mail 


M3 Mail 3.0 


Reference I 
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I Reference 
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fig.16 
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by the user and modification of policy 
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Display a 
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Message 



The registered program "File Recovery 3.0" may have been 
altered. Do you wish to register it anew as a legitimate program? 

If you choose "Yes", "File Recovery 3.0" will be registered anew 
as a legitimate program. 

If you choose "No", access from this program will be denied. 
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fig.18 



1800 



Message 

The unregistered program "WWW Walker 4.5" is attempting to 
access the file "personnel.doc". Do you wish to permit access? 

If you choose "Yes", all the subsequent attempts from 
"WWW Walker 4.5" to access any doc file will be permitted. 
If you choose "Only this time", only this access will be permitted. 
If you choose "No", access will be denied. 
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Message 



The program "Photo Editor X" is associated with a new file type 
(*.xyz). Do you wish to permit access? 

If you choose "Yes", all the subsequent attempts from 
"Photo Editor X" to access any xyz file will be permitted. 
If you choose "No", access will be denied. 
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